<html>
<head>
<meta content="text/html; charset=ISO-8859-1"
http-equiv="Content-Type">
</head>
<body bgcolor="#FFFFFF" text="#000000">
<br>
<br>
On 2/1/12 3:20 AM, Luis Rodríguez Fernández wrote:
<blockquote
cite="mid:CACp70MkFe7RC0fLVA7wNPnf8Ve7RryBB3pXOHPzEMx3JXB7+jQ@mail.gmail.com"
type="cite">Hi Jose,
<div><br>
</div>
<div>
<ol>
<li>Writing: you can do it "manually". See <a
moz-do-not-send="true"
href="http://stackoverflow.com/questions/6681083/consume-samlresponse-token/9080912#9080912">http://stackoverflow.com/questions/6681083/consume-samlresponse-token/9080912#9080912</a></li>
</ol>
</div>
</blockquote>
<br>
<br>
The OP's question(s) were about reading/writing SAML from/to a file,
and about signature generation and validation. I don't see anything
in that page that relates to either of those things.<br>
<br>
<br>
<br>
<blockquote
cite="mid:CACp70MkFe7RC0fLVA7wNPnf8Ve7RryBB3pXOHPzEMx3JXB7+jQ@mail.gmail.com"
type="cite">
<div>
<ol>
<li>Signature:</li>
<ul>
<li> Sign: </li>
</ul>
</ol>
<br>
</div>
</blockquote>
<br>
<br>
Just for the benefit of the archives and other people: I don't want
to be harsh, but these examples are not correct. These code
snippets illustrate how to use the Java Signature class to implement
the primitive operations of signing and validation over a byte
sequence. SAML signatures are XML Signatures, and encompass
considerably more than that. That's one of main purposes of the
OpenSAML library (in addition to general support for XML-Java
language binding). The exceptions are the "simple sign" mechanisms,
which are raw signatures over some "blob" of data, such as defined
for the HTTP Redirect DEFLATE and HTTP Post-SimpleSign bindings.
However, these examples are not even correct for those cases.
Generally, the complexity is in how you construct the actual byte[]
that you are going to sign. <br>
<br>
So just FYI.<br>
<br>
--Brent<br>
</body>
</html>